Do not override internal OAuthLib property

The previous code broke OAuthLib when `rotate_refresh_token()` returns `False`. OAuthLib would attempt to serialize the `RefreshToken` object into JSON because it is a string when not modified.