Updates sdk to use api.box.com/oauth2 for refreshing and revoking tokens...

... instead of app.box.com/api.