changing permitions requires relogin to update the UI

Right now the role is stored in the browser cache when we log in and never updated. We should update it periodically, how about when we update the token?