hack: retry requests if bad token