**BC-BREAKING** - fixes #397, refresh tokens should not be encrypted inside crypto tokens