update access token on refresh