Turn off issuer, client id check for refresh token (#395)

Turn off issuer, client id check for refresh token (#395) #1162