Re-enabled authorization protection for refresh function.