tests that tokens gets refreshed, passed along as bearers, etc.
This makes it easier to test other OIDC code.