Add documentation for oauth refresh tokens