Adding RefreshToken as token type

It may be useful to have a dedicated RefreshToken class (subclassing ServerAccessToken) to represent the generated refresh token. This allows implementors to drop the BearerAccessToken on expiry and persist the RefreshToken until used by the client.