* fix refreshing of xsrf token if it is invalid