1. Add "refresh_token" to the authorized grant type of the sample client details.

2. Add access token to the cookie of the web-client