refreshToken is not needed anymore