Added support for basic auth for refresh token requests