Handle access_token, refresh_token and expires_in