refresh token does not depend on AccessToken::isAlive