Refresh tokens #30
Description
Add support for refresh tokens in the auth flow. This should be:
- Model refresh tokens and store them in the DB (it could also be in a Redis DB for example)
- Return a refresh token in the login endpoint too (currently it only returns an access token)
- Add a "refresh" endpoint that receives a refresh token and returns an access token
- Add a "logout" endpoint that revokes the refresh token