[keycloak-user] Identity broker and token refresh