ascii decode in _refresh_access_token

Decode the auth_header to ascii or else the requests library will try to POST b'auth_header' and we won't get a new access token