add refreshToken method