Added exceptions for refresh tokens and clarified others