Log out users who need to update their auth token

[bhollis]

We are now enforcing that the auth token must contain the profile you're interacting with. This returns a 401 if you don't, which at least will force DIM to re-auth.