Refresh access token and revoke token

Refresh access token when current access token is expired.
Revoke token if refresh_token doesn’t exist.