invalidateRefreshCooldown

Forces a refresh on the next call, bypassing the cooldown. Used by the Account token-change listener; without this, opening /em setup pre-login stamps the cooldown even though the refresh short-circuited, and the legitimate post-login refresh gets throttled out for 5 minutes.