adds auto token refresh on expiration