hub: refreshing tokens