always refresh token when cridential has refresh token key