support app only bearer token invalidation
update ui when bearer token changes