implements refresh access token (session id) for soap-based (username/password) login