fix refresh token
add refreshToken to when authentication