fix access_token validation
force reload access_token by code for expired token