refresh token with the same format as acces token