refreshToken bug