Fix the token refreshing logic
Fix the example's secret cred