Better handle `invalid_grant` errors

[epai]

It seems like many students are still getting invalid_grant errors, which are caused when they have expired local tokens. I thought I handled this in the latest ok_client update, but I guess not. Would be good to handle on the ok-client side, by force reauthenticating.