Don't logout users when requesting new tokens but authenticate via a grant strategy instead