fix: possible panic if refresh token has a null session_id (#1822)

fix: possible panic if refresh token has a null session_id (#1822) #1072