Covered all cases, fixed CS, added a new TODO

api/tests/functional/authserver/RefreshCest.php

@@ -115,7 +115,7 @@ class RefreshCest {
         $I->canSeeResponseCodeIs(401);
         $I->canSeeResponseContainsJson([
             'error' => 'ForbiddenOperationException',
-            'errorMessage' => 'This account has been suspended.',
+            'errorMessage' => 'Invalid token.',
         ]);
     }