Disabled refresh tokens.
Updated README.
Fixed: only provide avatar when available.