How to expire token upon logout? Also how to implement refresh token if the token is expired? Please do help