Java Spring Security with JSON Web Token and Refresh Token