just issue token without refreshing token