So maybe that's cause you have been using the old refresh token to make an API call after using a new access token?