https://celery94.github.io/posts/aspnetcore-refresh-tokens-and-revocation/