only cancel current refresh when new one is scheduled
cleanup
reject restore if access token is already expired