moving refresh and confirm requests to the AppBlade Token category

(rather than keep it in the header file)