#32 - Honor AuthenticationProperties.AllowRefresh.