fix bug in create_for_token()

create_for_token() was not calling create_for_refresh() properly