ok got it. so what happened is my middleware threw a forbidden 403 somehow, I corrected it to a 401 and now the refresh always works!