Quick patch to add support to use `refresh_token` as Box's oauth2 implementation needs support of it.
More info: http://developers.box.com/oauth/