add auto_expire init option and make auto_signin option pre-emptively request authentication if no access token - closes #24