refactor(auth): decouple web refresh error handling from the mobile handler