fix auth token refresh

simplified the algorithm to use a single setTimer (2 minutes before
refrsh required)