Session Management (Access/Refresh Token) Overview We'll save the refresh token in the database to make it invalid at anytime