Add tests for refreshing the access token