added note about refreshing tokens