Draft
User should be able to reauthenticate after access token expired