S501 Refreshes an access token

What this test does

Only if a refresh_token was issued: uses it to get a new access token.

How it passes

Returns a new access token and me, with Cache-Control: no-store.

Specification

§5.5

Needs

S301 Exchanges a code at the token endpoint