Initial support for refreshing OAuth2 tokens