Refreshing access tokens

- Added access token expiry check
- Added grant types to allow refreshing of access tokens for webserver and device clients
- Refactored models to use expiresMixin
- expiresMixin now uses model updated_at date instead of created_at
- Modified tests to correctly set model updated_at time
- Renamed config parameter for consistency with other similar parameters