1) Update to Spring Security OAuth2 2.0.2.RELEASE 2) Correct EspiTokenEnhancer to properly handle /oauth/token endpoint grant_type of refresh_token request