[#628] Clean up stored auth tokens

[roberlander2]

Description

This PR encrypts OIDC refresh tokens and hashes Core BB refresh tokens in login session documents. A <sessionID>: prefix has been added to Core BB refresh tokens sent in login and refresh responses, and OIDC refresh tokens are no longer sent in login and refresh responses. It also implements a session ID cache to rate limit refresh attempts for session IDs known to fail a refresh.
Depends on rokwire/core-auth-library-go#86.

Resolves: #628

Review Time Estimate

Please give your idea of how soon this pull request needs to be reviewed by selecting one of the options below. This can be based on the criticality of the issue at hand and/or other relevant factors.

• Immediately
• Within a week
• When possible

Type of changes

Please select a relevant option:

• Bug fix (non-breaking change which fixes an issue).
• New feature (non-breaking change which adds functionality).
• Breaking change (fix or feature that would cause existing functionality to not work as expected).
• Other (any another change that does not fall in one of the above categories.)

Checklist:

Please select all applicable options:

• I have signed the Rokwire Contributor License Agreement (CLA). (Any contributor who is not an employee of the University of Illinois whose official duties include contributing to the Rokwire software, or who is not paid by the Rokwire project, needs to sign the CLA before their contribution can be accepted.)
• I have updated the CHANGELOG.
• I have read the Contributor Guidelines.
• I have performed a self-review of my own code.
• I have commented my code, particularly in hard-to-understand areas.
• My change requires updating the documentation.
• I have made necessary changes to the documentation.
• I have added tests related to my changes.
• My changes generate no new warnings.
• New and existing unit tests pass locally with my changes.
• Any dependent changes have been merged and published in downstream modules.

---

[shurwit]

Thanks @roberlander2, LGTM!

@petyos, please take a look when you get a chance. Thanks!