4.10.2
Resolves #421 by removing src/untyped.ts from the project, which was previously overwriting openid-client types for some devs.
Resolves #488 by ensuring all TokenSets are of valid TokenSet type per openid-client TokenSet class. Previously refreshWithRefreshToken was not getting a consistent TokenSet given it was coming directly from Xero identity without being passed through openid-client library. Also updated sample app and sdk readme to leverage built-in tokenSet.expired method