session fix stuff

backend/cmd/server/main.go

···
 		logger.Fatal("Failed to run migrations: %v", err)
 	}
 
+	go func() {
+		ticker := time.NewTicker(1 * time.Hour)
+		defer ticker.Stop()
+
+		if err := database.DeleteExpiredSessions(); err != nil {
+			logger.Error("Failed to run initial cleanup of expired sessions: %v", err)
+		}
+
+		for range ticker.C {
+			if err := database.DeleteExpiredSessions(); err != nil {
+				logger.Error("Failed to delete expired sessions: %v", err)
+			}
+		}
+	}()
+
 	embeddingClient := embeddings.NewClient()
 	if err := database.MigrateRecommendations(); err != nil {
 		logger.Fatal("Failed to run recommendation migrations: %v", err)

backend/internal/api/token_refresh.go

···
 		return false
 	}
 	errStr := err.Error()
-	return bytes.Contains([]byte(errStr), []byte("invalid_token")) &&
-		bytes.Contains([]byte(errStr), []byte("exp"))
+	return bytes.Contains([]byte(errStr), []byte("invalid_token")) ||
+		bytes.Contains([]byte(errStr), []byte("AuthenticationRequired")) ||
+		bytes.Contains([]byte(errStr), []byte("Unauthorized")) ||
+		bytes.Contains([]byte(errStr), []byte("authentication required")) ||
+		bytes.Contains([]byte(errStr), []byte("TokenExpired"))
 }
 
 func (tr *TokenRefresher) ExecuteWithAutoRefresh(

backend/internal/db/queries_sessions.go

···
 	_, err := db.Exec(db.Rebind(`DELETE FROM sessions WHERE id = ?`), id)
 	return err
 }
+
+func (db *DB) DeleteExpiredSessions() error {
+	_, err := db.Exec(db.Rebind(`DELETE FROM sessions WHERE expires_at <= ?`), time.Now())
+	return err
+}