Following cases are implemented for now:
* Refresh token changes, only allowed for once
* Refresh token does not change, allowed multiple times
* Claims missing, UserInfo existant
* Claims existant and signed (Signature is checked), UserInfo existant