If no oauth token is granted, on access PIN expiry (or revocation on server), program doesnt proceed with transaction calls