making it simpler to use refresh tokens as oAuth2 client ids and avoiding using UUID to generate tokens