First patch witch jwt and refresh-token

• resource server and rest service in one application
• authenticate with basic auth
• generating JWT and Refresh-Token
• re-generating JWT by Refresh-Token
• providing first start of method security
• storing user role in database and JWT