- Fix refresh token request to use correct endpoint URL - Set proper content-type header for token refresh requests - Include client_id in refresh token payload - Add tests verifying correct endpoint, content-type, and client_id in refresh flow