Provide a better error message with expired OAuth token

Without refresh tokens, calls to `force export` (and probably others) can error
out with `ERROR: Bad_Oauth_Token`.

This pull request adds an path for handling the 403 returned and gives a better
error message