create authenticator on demand in LoginControllerMixin
removed test for non-existing class
separate token refreshment scheduling and refreshing