Mark accounts invalid on refresh 401/403 to avoid no-account loops