why not cache at least until the token is supposed to expire?