add test coverage for exchanging temp token for permanent access token