auth identity endpoint so i don't have to constantly authorize after refresh