Show only the APP_USER_SESSION with a valid refresToken