update README to also use deleteRefreshToken