GitLab

Without this, the downscoped token was being revoked, but the call to get a
fresh one was returning the cached non-downscoped token.

Also adds an assert to catch regressions.

BUG=b/20662147

Review URL: https://codereview.chromium.org/1123183005

Cr-Commit-Position: refs/heads/master@{#329711}