refresh token bug fixed