this version will reject its promise when it can't reauthenticate, using the injected AuthenticationService