refresh

Rotates both bearer and CSRF credentials while preserving the approved browser identity.