I can receive valid access and refresh token after I logged in to my login endpoint API.
for some views, I have given is_authenticate permission where after providing