Use refresh token to get new access token if expired
order groups by name