fix MVC model binding bug for refresh tokens