Now to handle the case where it's invalid, you need to call the refresh token API. In order to do that,