BUG - Endpoint GET /oauth/refresh is not returning passport permissions

[leoraba]

Steps how to reproduce the issue:

Prerequisites: Have an active login session in Ego with a user registered with a Passport broker:

1. EGO JWT token
2. EGO refresh token cookie stored in browser as refreshId

Steps:
Call POST /oauth/refresh (using POSTMAN)
Header:
Cookie: refreshId=[REFRESH_TOKEN_HERE]
Authorization: bearer [EGO_TOKEN_HERE]

Expected Response:

• a new EGO JWT token that includes scopes based on passport permission.
• a new EGO refresh token

Actual response:

• a new EGO JWT token that does not include scopes based on passport permission.
• a new EGO refresh token

Tentative solution:
use refresh token provided by Passport broker instead of the usual EGO refresh token

Endpoint used by:
platform-api and workflow-ui

[leoraba]

PR #718