save the refresh token