Integrate ApprovalStore with JwtTokenStore

Implemented remove*() methods as an operation on the ApprovalStore. So
for user tokens at least you will not be able to automatically get an
access token without explicit approval once those methods have been
called.

See gh-182
Check for approvals in JwtTokenStore before reading refresh token

Fixes part of gh-182