is refresh token really beneficial in terms of security? This question is SPA application specific like reactjs or vuejs.
