get access and refresh token validity in backend