Best practice for refreshing token for Auth0 Management API