166 refreshing access token before expired

[coisu]

now check_refresh endpoint is refresh the access token eveytime when it called. return refreshed access token on response body, update user's last_valid_time value

• seems our main has problem now, so this branch doesn't need to be merged right now.