Split refresh session function (#3101)
This lets other plugins, such as the OIDC issuer, reuse the "refresh" logic.
I have refactored Refresh Token user refresh to reuse this new method. It means that new Offline refresh sessions will keep more attributes from now on