This means that if you provide both tokens to

/next

you generate new token pair. U only use

next token

once and if you generate new pair, and then someone else tries to generate new pair before the issued pair access token expires then you know that user is being hacked