Custom authentication logic for `/refresh` endpoint

[dodiameer]

Issue:

If access token expires before it's refreshed, the currently available refresh token is also useless as it can't be used to refresh the access token, because the endpoint uses the same middleware for authentication as other endpoints

Possible fix:

1. Writing a new middleware function specifically for this endpoint
2. Adding a check for the endpoint in the existing middleware