Put a session wait around token refresh