title: Dealing with access token that expires
body: <p>What is the best way to handle an access token given by a 3rd party api that expires every hour?</p>
  <p>Basically Im making my own stand alone api that will serve as a gateway for our other apps which in turn will be accessing the 3rd party api. Best way is to save it on DB and check before call if it has expired already but considering it's just 1 access_token it might be overkill. Another I am considering is session but how reliable are sessions for keeping access tokens?</p>