Minor Change api : validate refresh tokens