Removes requirement of "refresh_token" in config

A non empty value for refresh_token was required which meant the code
could get into a loop if a token was removed and never successfully
refresh.

Removing the requirement allows the correct error to prompt for
credentials and updates the config correctly as well.