Added parameter window_hidden, to allow for refreshing tokens of Auth1 providers like twitter
Updated readme