don't set the refresh token if neither refresh token nor expire date is provided

Fixes issue #70 - makes `expires_in` optional.