Token handling

This patch makes the httpClientHelper thread-safe and handles invalid accessTokens from the auth-server in the resource-server