Fixes #44 by not issuing refresh tokens to public clients.
Merge branch 'IvanMartinez-only_confidential_client_refresh_token2'