Testing authorization with refresh token