Refresh user if not valid

[freever]

If we can't get a resolution to this:
https://stackoverflow.com/questions/60016498/azure-ad-b2c-how-to-propogate-new-user-claims-to-the-access-token

Then we need to change
TUser ExtractUser(ClaimsPrincipal claimsPrincipal);

To
ValueTask<TUser >ExtractUserAsync(ClaimsPrincipal claimsPrincipal);

Add an IsValid property to TUser so that if it doesn't contain what it needs after being extracted from the ClaimsPrincipal, we can fetch it from Azure.