update client.yml, secret.yml and security.yml templates

[stevehu]

• Add refresh token section to client.yml and add enableHttp2 to both token and key services
• Remote http2Support from security.yml
• Add refresh token client_secret to secret.yml