Another way is if the frontend knows that the token has expired already, and directly calls the refresh API