Rotating refresh tokens seems better in terms of security and theft detection, anyway we will be evaluating that as well