make user_id not required for refresh_token grant
Merge pull request #174 from trickleup/develop

make user_id not required for refresh_token grant