You dont need to set redirect url, access type and scope. You can't extend a refresh token's existing privileges.