If you had Voysey open in more than one tab, the tabs could race each other on refresh. One tab would rotate the token, the other would present the now-invalid old one, and the server would log you out. Fixed. Rotated tokens now honor a short grace window, and /auth/refresh is serialized across tabs so only one goes at a time. You stay signed in.