automatically detect when the auth token has been revoked, use creds for it, and update config with new token