Add BFF token exchange/ITokenRetriever sample

[josephdecock]

Closes #124

[brockallen]

My only comment would be that perhaps somewhere we need to mention that this transformer is called on every outbound call, so any caching is up to the implementation.