update oauth refresh upon the changed behavior our backend OAuth refresh...

.... The new behavior is: after refreshing, the old refresh token keeps valid until the newly generated token is used. The change is to make sure if a thread failed refreshing, another thread can still try to refresh. 
(Also updated some outdated java doc comments)