Support automatic refresh of tokens

This also unifies the request processing further, at the cost of loosing the object_id in the exception