add refresh token fearture and a callApi method
add grant type
remote callApi
replace grant_type with token_type