changed readme to show that refresh token works