Replace the refresh token locking mechanism