Add a refresh step to the OAuth 2 implementation