client auth methods
added refresh token test
fixes
bug fix