Finished auth, added playlist functionality

also added client version of token refresh (see reauth)