prototyping automatic refresh token handling