Add note to README.md to remind about persisting fresh tokens

[mensly]

Motivation and Context

Had an issue using this library for the first time by forgetting to update the persisted authstate after using fresh tokens, especially when integrating with services that have single-use refresh tokens.

Description

Adds a note to the documentation to help people know that this is required.