Allow refresh_token grants for all client types

+ Close #277
spec refresh token functionality
Merge pull request #306 from edpaget/refresh-tokens