sorting out refresh token