refresh token client tests

[ThierryBerger]

• client tests
• do not revoke a refresh authentication token immediately to allow for the client cache to catch up (a few frames of delay can be observed).