fix: session should not invalidate on any error - added specific error handling for OAuthAccessTokenException