generate new token when expired