Add refresh token to proper authorize block