I have an isAuthenticated method that sends the access_token to the verification endpoint. if the response has an error I send the refresh_token to the refresh endpoint and when