add note to change the token in refresh tokens

Author: IndominusByte

docs/usage/refresh.md

@@ -2,6 +2,10 @@ These are long-lived tokens which can be used to create a new access tokens once
 
 Utilizing refresh tokens we can help reduce the damage that can be done if an access tokens is stolen. However, if an attacker gets a refresh tokens they can keep generating new access tokens and accessing protected endpoints as though he was that user. We can help combat this by using the fresh tokens pattern, discussed in the next section.
 
+!!! note
+    For accessing **/refresh** endpoint remember to change **access_token** with **refresh_token** in the header
+    `Authorization: Bearer <refresh_token>`
+
 Here is an example of using access and refresh tokens:
 
 ```python hl_lines="35 46"