Access token refresh should rely on err objects