Major Description
The ExpiredAccessTokenCleanup task is set to run every 5 minutes by default: this timing can be reduced to 2 minutes, but not less - as any other job driven by Quartz.
It could happen, then, that for a period of at least 2 minutes (5 by default), all authentication attempts will fail by any user which owns an expired, yet still not removed, Access Token.