OIDC refresh token timeout and revocation cache lifetime

[Cantor, Scott]

I would assume I guess that you'd set refreshTokenChainLifetime to the actual upper bound you want. The refreshTokenTimeout is now actually a timeout between uses (so the documentation is wrong). It was renamed to reflect that fact.

-- Scott