disable user on token refresh error