Add proper support for refresh token grant type

There were hints of support before but this provides the proper
implementation, tests and documentation.
Closes #3
Add changelog
v 1.4