the server supports access token update if it's expired