Port AuthProperties.AllowRefresh from Katana.

I think in C# 6 you can do:
```c#
if (Dictionary.TryGetValue(RefreshKey, out var value))
```
To avoid the `string value;` declaration outside the `if()`.