make sure that client presenting refresh token is the same client the refresh token was issued to

closes #735
fixed unit test
[maven-release-plugin] prepare release mitreid-connect-1.0.20