func TestResourceServer_ValidateAccessToken(t *testing.T) {
	r := newMockResourceServer(t)
	_, err := r.ValidateAccessToken(context.Background(), "myserver", sampleIDToken)
	assert.Error(t, err)
}
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."