Inactive token still works

@moconnor I see. You can refer the doc here for how we doing this in Spring Boot library.
For more details, you can check this article
For postman test I believe you have done that correctly. Here is the reference for the steps.