auth/oauth: updating token in database when automatically refreshed