authenticate user on every page refresh. If the auth_token is invalid. bye bye.. logout