- Fix token refresh for new Bexio OpenID Connect provider URL
https://auth.bexio.com/realms/bexio: Always store scopes in tokens file, as they are also used inrefreshToken(). - Add
SensitiveParameterattribute to all sensitive parameters to avoid logging/leaking them.