Get access token by a refresh token

[asaf]

If Cache cannot provide an access token and a refresh token exist, then we should try to get a new access token by using the refresh token without End-User interaction.

refresh tokens should be optional since they are less secure since we need to persist them in cache.