Refresh token working. Need to reduce usage. Need to add correct person checks