Add token refresh, currently untested.