Implement Refresh Token to receive JWT Token - security

[gabrielhicks]

Instead of storing the access token which only has a timeout and is irrevocable in localStorage, a shorter duration refresh token could add a layer of security and allow hacked accounts to be recovered more quickly