When a Refresh Token Becomes Unusable