updated refresh token functionality