refresh token url and body, small refactoring