JWT Refresh Token in ASP.Net Core (a deep dive)