Add token_refresh_only to config example

[Boby360]

token_refresh_only provides emergency support for authenticating only with refresh tokens meaning no account modification needed.