Added middleware to silently refresh tokens

See merge request !1

Auth.py
 - Removed unnecessary authenticate override
 - Changed time format to save token expirations as

middleware.py
 - Moved into its own middleware, separated from SessionRefresh
 - Overrided is_refreshable_url, removing request method check