Rework for AD logic

Only disabling endpoint validation for known test endpoints

Throwing distinct exceptions for authentication failures of various types

Manually handling token refresh, eliminates browser pops and causes requests to fail on refresh token expiration instead of causing a popup.