[name] asked: how to perform refresh requests if tokens are in HttpOnly cookies and JavaScript does not have access to them?