moving user refreshment to interceptor
refactoring permissioner... i am not completely sure
extracting basic flow