Cleanup OAuth tokens specs
Follow-up from #426658 (closed) and !132758 (merged).
We have OAuth token controller specs in both spec/requests/api/oauth_tokens_spec.rb
and spec/requests/oauth/tokens_controller_spec.rb
. Consolidate the specs in spec/requests/oauth/tokens_controller_spec.rb
and DRY everything up (consider using parameterized tests?)