Configurable realm name and refresh token example

This allows the realm name to be configured and ensures all of the beans reference the same `oauth2AuthenticationEntryPoint` bean where appropriate to guarantee consistent configuration of the authentication entry point.

Also adds an example of the refresh token grant flow to the docs since that was missing.