Expose refresh tokens to clients

@jjbohn Trying to expose refresh tokens to clients.