minor improvementes to the refresh token page

I'd leave the part that you can use it even when the `id_token` is expired. Just for clarification.