allow renew_token as pluggable and tests for same