Support expiry of refresh tokens and expiry of the overall session when refresh tokens are in use.