allow refresh, ignore authentication error