Added removeRefreshToken method to SessionInterface
Update associated scopes if requested in refresh access token. Fixes #47
Merge branch 'feature/refresh-token-rewrite' into develop