Am curious to how you folks handle refreshing tokens, like should the client handle requesting a new token or do you let the server auto refresh it if it has a valid refresh token within a request that would otherwise fail due to an expired access token