chore(docs): Update link to refresh token rotation tutorial (#11537)

Co-authored-by: Nico Domino <[email protected]>

docs/pages/concepts/index.mdx

@@ -84,7 +84,7 @@ Auth.js records Refresh Tokens and Access Tokens on sign-in (if supplied by the
 
 You can then look them up from the database or persist them to the JSON Web Token.
 
-Note: Auth.js does not currently handle Access Token rotation for OAuth providers for you, however, you can check out [this tutorial](/guides/TODO) if you want to implement it.
+Note: Auth.js does not currently handle Access Token rotation for OAuth providers for you, however, you can check out [this tutorial](/guides/refresh-token-rotation) if you want to implement it.
 
 </Accordion>
 <Accordion title="When I sign in with another account with the same email address, why are accounts not linked automatically?">