added auth exception listener
Changed refreshUser, now only makes refreshToken call to api if it's expired and has refreshToken. If it's expired and hasn't refreshToken throws a UserNameNotFoundException