Now we can handle silent accesstoken refreshs

To refresh an accessToken you can now call the strategy without req,
res, cb
Also the SPAppToken is now stored as the refreshToken.