handle token expiration and revokation