I have one refresh token n one access token. Refresh token will be saved in DB and access token will be saved in user browsers local storage.