fix refresh code condition

allow the old model of impersonation (marked as obsoleted) to allow refresh in case the client infra is unavailable making 4xx the only no-refresh condition.