fix bug that failed refresh token will lead to not authed