Found the bug with refresh tokens. They weren't getting saved to the DB. Should work now.