fixed refresh token to set access token