Remove the token store. Change refresh tokens to jwt.

Also includes:
- Removal of the token admin endpoints
- Expire refresh tokens when the user changes their password
- Remove the token lookup from the app sample
- Remove the need for a separate refresh grant. Authcode and password grants will
  automatically get a refresh token.

[#44041363]
[#43589475]
[#38710223]

Change-Id: I96737fece7356e9ae00c7daa2edfd102e2c445e7