refresh token is now saved when it was firstly generated