implemented auto refresh auth token

- save/delete auth token
- refresh token 1 minute before it is set to expire
- check if stored token is valid on page load
- refactored user service to be cleaner