OAuth2 control refresh button hideable