We need to log the refresh token's id wherever we use it to extract an access token, not only when it is returned by the server.