#23: implemented refresh on session expiration (but no tests at the moment)