so if i wouldn't switch on blacklisting and i deleted a session only the refresh token will be deleted, correct?