title: Using both access and refresh tokens for refreshing them
body: <p>Was investigating how to work with JWT and found not obvious thing for me:
  Why for refreshing access token are not using both access and refresh tokens but only refresh token?</p>
  
  <p>In this case we will be able to:</p>
  
  <ol>
  <li>Verify access token signature, even if it is expired.</li>
  <li>Get from access token information from payload, which may help in finding refresh token in database.</li>
  </ol>