debugging
updated updateToken to use _id, removed refresh param from get and post methods