Actually pass the payload too
Document all the things
Abort with 403 on invalid refresh tokens
Fixed route registration
Missing import
Mount everything under /auth
Fixed some arguments
Test dependencies
Unit tests, ho
More testing
Testing the response handler