Disable whitelist on auth refreshToken call (#385)

[cpave3]

Changes

Please describe both what is changing and why this is important. Include:

• modify the auth refreshToken call to allow custom parameters

References

Please include relevant links supporting this change such as a:

• from Issue Support custom parameters in RefreshToken call #385

Please note any links that are not publicly accessible.

Testing

Please describe how this can be tested by reviewers. Be specific about anything not tested and reasons why. If this library has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

• This change adds unit test coverage
• This change has been tested on the latest version of the platform/language or why not

Checklist

• I have read the Auth0 general contribution guidelines
• All existing and new tests complete without errors
• All active GitHub checks have passed