Fix token refresh

no issue
- spam prevention causes token refresh to return an error