Auth invalidation support on expired tokens

This adds invalidation support as outlined in https://github.com/Retsly/retsly/issues/939.

We now do a validation check on ajax error/success. 

Review please @slajax @switters