You can explain they need to refresh etc but they do not understand it or like it because they do not have to do this on Facebook or other sites where logins work differently- and even if they do, they are not presented with a white screen with 'invalid token' on it!It is a catastrophic usability nightmare, that really cannot be stressed strongly enough.