added picture, refresh token expiration