Synchronize with redaxo app and sanitize refresh callback

hopefully.