Some form of endpoint that accepts an expired token and returns a new one (for cycling tokens). ‼️ We'll need to consider the safety implications of this ‼️