fix oauth2 refresh