refreshToken not required here.