implemented token gain and refresh ("POST /authorize/token")
bugfixes
polished readme
added comments