#credentials

Refresh token discarded by the connect callback, on purpose

One issue tracker started sending refresh tokens with short-lived access tokens, and my connect step had been written to discard them. I now save the refresh credential everywhere, renew based on what is actually stored, and retry once, with a few hazards still open.