If we're going to be backward compatible wit the old API  api_key based approach to interacting with the Box API, we should check to make sure that a @refresh_token actually exists, prior to attempting to refresh it.

Do you mind re-submitting your collaboration pull request on a branch named 'collaboration', would love to pull that stuff in separately.