make sure unlock is called after refreshing oauth
Merge pull request #38 from box/refresh

make sure unlock is called after refreshing oauth