force an authorization request from the user; any cached access tokens should be discarded by the plugin.