**BC-BREAKING** - fixes #397, refresh tokens should not be encrypted ins...

...ide crypto tokens