updates documentation to include refresh token