Added simple refresh token; need to improve this