Added support for auto_login: false

Fixes #63
Added refresh tokens