Add note to readmes about storing refresh tokens

Fixes GH-61.