oauth2server: access and refresh tokens encrytion

* closes #2127