rework login_refresh to call check_token after

Signed-off-by: William Rockwood <wrockwood@tadl.org>