Refreshing unexpired token

Are validating requests done by GET?