Add token refresh to the Service Auth client

[calebmshafer]

The current service authorization client gets a new token and stores the expires_at but does not properly handle refreshing the cache token if it's expired.

I'd propose we update the getAccessToken() method to check the expires time and refreshes the token if needed. This will make it so that getAccessToken is now always returning a valid token.