don't overwrite refresh token