Add "Refresh Token" section of documentation

[zpchavez]

Should include the following information.

In order to get a refresh_token from an authorization_code grant type:

1. scope must include offline_access
2. Your login URL needs to include &prompt=consent
3. You need a refresh_token grant type for your client in the OIDC database