Shouldn't the old access token be invalidated by a refresh call? Shouldn't the old access token be invalidated by a refresh call? symfony symfony