Allow bypassing the plist storage for refreshToken

and instead choose when to refresh and when and where to save the
refreshToken,
similarly to SDKs from other vendors.