Support OAuth2 refresh_token exchange