Token auth: fix automatic token renewal