bug on refresh token invalid