use new auth0js to avoid refresh
using the latest auth0js that supports callbacks
Merge pull request #4 from auth0/no-refresh

no refreshs!