working with refresh token + database