Made the refresh action versioned and authorised like every other action, since we're now using a CronJob to call it.