do i need my own logic in the backend to handle the process of interacting with the supertokens core for new login, expiry of access, or expiry of access and refresh,?