added refresh for access token in user api
changed token function name