Fixed credential refresh proxy to actually use the refreshed token