OK: token still valid, no refresh needed