Fixed incorrect assumption of CLIENT_CREDENTIALS grant being synonymous with the BROWSE scope.
 - You must explicitly define an endpoint as compatible with CLIENT_CREDENTIALS
Added demo methods for /user/whois, /revoke and /user/whoami
Added RespError.INVALID_TOKEN
Added OAuth2.hasRefreshToken()