This is used to renew a token. The resulting new Jwt specifies the header name and header value that should be passed on all subsequent requests to identity the caller. Tokens expire and need to be renewed again. You only need to pass the expired JWT. Auth credentials are not needed to renew a token