OpenID Connect silent re-authentication using the refresh token