https://medium.com/super-duper-cookie-based-authorization-symfony-api/part-3-refreshing-the-token-45be20deda96