Refactor passport bearer strategy so I can capture the invalid token errors and issue 401 back to the client
Thunkify JWT.verify() and Add yield to JWT.verify(token, this.secret); in verifyJwtTokenAndExtractData
Set refresh header via a header
Fix refresh token specs to use sinon clock instead of predating the token in the db
Fix the jtw specs to because verifyJwtTokenAndExtractData is now a generator