Issue #108 - access token shown for refresh token