Make it possible for confidential clients to refresh tokens.  Also, update the web sample app to use the current middleware that has been separated from the core express package.
Update doc comment on acquireTokenWithClientCredentials to indicate that the new clientSecret parameter is optional.
Merge pull request #25 from RandalliLama/dev

Make it possible for confidential clients to refresh tokens.