Add RefreshToken to the WebServer auth response

Implements the refresh_token for use in later token auth calls. Uses the same pattern as the existing object fields, so the client.RefreshToken field will be present but empty if you make a request that does not include 'refresh_token' in the initial call's scope