May be best to use a "hidden iframe" solution like http://stackoverflow.com/questions/24881802/dealing-with-expired-access-tokens-in-oauth2-implicit-grant