add invalidation of the authtokens.

verify that sms forwarding (aka shadow numbers) is disabled.
watch for connectivity events to intelligently time refreshes
when connectivity returns.

Change-Id: Ic1a9e03c67e2dd858592206882a31ab2c8a2c7ba