refresh token bug fix