Fix token refresh

no issue
- spam prevention causes token refresh to return an error
Merge pull request #3621 from sebgie/fix-refresh-token

Fix token refresh