update tests to handle increased security OauthToken with no refresh token