Ensure that UAA token is up to date

  - AccessTokenHandler becomes UaaSession
  - No longer have to call #auth_header to ensure that the access token
    is up to date
  - Assume that the refresh token does not change

[Finishes #66248794]