adds a bit on why refresh tokens exist and a missing code example and a typo fix