option to disable auto-token-refresh