feat(user-svc): implement token refresh

[crufter]

Since now even the currently active organization id is stored in the JWT it's becoming more pressing than ever to have an easy way to regenerate/refresh a token without logging in.