Prevent concurrent calls to refresh the auth_token