message: server: handle case where dex doesn't return a refresh token
  When a user logs in through the SAML provider, they aren't issued
  a refresh token. Handle this case.
diff: @@ -396,8 +396,8 @@ users:
  client-secret: {{ .ClientSecret }}
  id-token: {{ .IDToken }}{{ if .DexCA }}
  idp-certificate-authority-data: {{ .DexCA }}{{ end }}
  - idp-issuer-url: {{ .DexURL }}
  - refresh-token: {{ .RefreshToken }}
  + idp-issuer-url: {{ .DexURL }}{{ if .RefreshToken }}
  + refresh-token: {{ .RefreshToken }}{{ end }}
  name: oidc
  preferences: {}
  