Add refreh token rotation to OAuth #333
Description
OAuth should support refresh token rotation to increase security of clients not using a client_secret.
See https://auth0.com/docs/secure/tokens/refresh-tokens/refresh-token-rotation#automatic-reuse-detection