fix: use refresh tokens in curl commands for user token flow (#981)

fix: use refresh tokens in curl commands for user token flow (#981) #2740