[WIP] Adding token refresh endpoint