Fix token refreshes against the Alfresco API
  - send client-secret value when requesting new tokens, which seems to do no harm with Chatter and is also required by Google
  - If the refresh gives a new refresh token, then make sure this gets saved too