updated profile / fixed return refresh_token