Corrected reading of client id/secret in case of token refresh