Factoring out AuthenticationTicket issuing logic
Replacing Access Token persistence with AuthenticationTicketProvider usage
Moving client_id and username checks from AuthorizationServerProvider to RefreshTokenProvider
Introducing constants for Owin context keys
Adding UserAgent column to refresh column to allow multi browser sessions per single client/user combination
RefreshTokenProvider making calls syncronous. + minor usaing cleanup