fix refresh token bug