[keycloak-user] Force token refresh with the Spring Security adapter