Allow refresh_token grants for all client types

+ Close #277