update readme to reflect refresh_token usage