This one really better not try to refresh my dang token.
I just want to make sure that it doesn't send another refresh token.
CSRF Should be disabled now...
Go away CSRF