use the stored credential's refresh-token

WARNING: *This pull-request depends on #25 and will leave you with broken code, if you don't apply both!*

Use the refresh-token of the stored credential. This prepares API-simplifications and automatic refreshing.