Creating an Access Token and a Refresh Token