Don't let the invalid token refresh responses to be set as new credentials