i think the issue with authentication is its not refreshing the token