Corrected url for token refresh