fix bo auth refresh