allowing downgraded oauth sessions to be properly refreshed