Breaking change in constructor for OAuth2Config after 2.1.3

[tronghn]

From @jan-olaveide:

#645 added the ability to rotate refresh tokens together with a new parameter for the OAuth2Config class.

This breaks for consuming code that doesn't explicitly define parameter names during construction, e.g. https://github.com/navikt/token-support/blob/master/token-validation-spring-test/src/main/kotlin/no/nav/security/token/support/spring/test/MockOAuth2ServerAutoConfiguration.kt

Ideally, new parameters with default values could be added to the end of the constructor to prevent such breakage. Otherwise this could have warranted a minor version bump.