handle session-expires with no explicit refresher