Add documentation example which demonstrates proper use of `on_refresh`

[sirosen]

Variants of the Flask example, the tutorial native app client, and the simple client creds example demonstrating proper use of on_refresh for RefreshTokenAuthorizer and ClientCredentialsAuthorizer would be nice references to have.