token refresh bug fixed