Force use of refresh tokens