Move forcetk refresh into the OAuth plugin