refactor: namespaces
refactor: refresh flow test
extend refresh flow to cc grant type
refactor: generateAuthorizationCodeAccess consistent signature
add test for invalid authorization header
add test to cover expectation of client
client is a user and therefore we can call getRoles ... more ideas for the future here
add client support for custom roles
test that an appropriat exception is thrown when storage handler service has not been configured
remove form action ... not needed
abstract security token provider into its own class so it can extended easily