Cleaned-up for demo
Refactored token refresh
Tested sending token thru authorization header