Some OAuth2 providers use different urls to refresh their auth tokens. (Like Keycloak). This needs to be configurable.