update refresh token to support up to 10 devices