C504 Does not ask for more scope on refresh

What this test does

Checks the scope parameter of refresh requests.

How it passes

Refresh requests ask for no more than was granted.

Specification

§5.5

Needs

C502 Refreshes expiring tokens