checkpoint: clean-up: remove unit spec
checkpoint: return access_token and refresh_token cookie when user is created