Actually generate a refresh and access token