Fixes #44 by assuming only confidential clients get refresh tokens.
Merge branch 'test' of https://github.com/IvanMartinez/oauth2 into test