that way can keep the refresh token longer and just refresh on login rather than "the first time" every time