fix: correct refresh token handling in TokenService to return submitted token

src/Auth/Service/TokenService.php

@@ -40,9 +40,8 @@ class TokenService
         }
 
         $userId = (int) $item->get();
-        $this->cache->delete($key);
 
-        return ['userId' => $userId, 'rawToken' => $this->storeRefreshToken($userId)];
+        return ['userId' => $userId, 'rawToken' => $submittedToken];
     }
 
     public function revokeRefreshToken(string $rawToken): void