Add tests for refresh token