fixup! refresh the access token in the background

Author: BacLuc

api/tests/Api/FirewallTest.php

@@ -116,6 +116,7 @@ private static function isProtectedByFirewall(mixed $endpoint): bool {
             '/auth/resend_activation' => false,
             '/content_types' => false,
             '/invitations' => false,
+            '/token/refresh' => false,
             default => true
         };
     }