Add refresh flow test
fixed access test
fix return new credentials