Add new feature: refresh_user

[Litzuck]

Implements the method refresh_user of the superclass Authenticator.
It periodically checks if a user is still in one of the allowed groups. If a user is no longer a member of any of those groups, their session token is invalidated.

The feature can be enabled using the option enable_refresh, and only checks users if allowed groups are set.

[welcome]

Thanks for submitting your first pull request! You are awesome! 🤗

If you haven't done so already, check out Jupyter's Code of Conduct. Also, please make sure you followed the pull request template, as this will help us review your contribution more quickly.

You can meet the other Jovyans by joining our Discourse forum. There is also a intro thread there where you can stop by and say Hi! 👋

Welcome to the Jupyter community! 🎉