Made invalid token, and similar problems, a 401 response instead of 500.
Corrected transaction type.
Added test for token services.
Changed refresh token expiration to be the same as that of the token
itself.
Fixed so that expiration is updated when a token is reissued.
Merge pull request #1032 from ORCID/fixRefreshTokenExpiration

Fix refresh token expiration