update security config

src/main/java/com/danielbohry/authservice/config/SecurityConfig.java

@@ -51,7 +51,7 @@ public class SecurityConfig {
                                 "/js/**",
                                 "/img/**"
                         ).permitAll()
-                        .requestMatchers("/api/users", "/api/authorize").authenticated()
+                        .requestMatchers("/api/users", "/api/authorize", "/api/refresh").authenticated()
                         .anyRequest().authenticated()
                 )
                 .sessionManagement(manager -> manager.sessionCreationPolicy(STATELESS))