fix: issue with refreshing token when client_secret is not set (#513)

fix: issue with refreshing token when client_secret is not set (#513) #571