Support client_secret_basic and client_secret_post for token endpoint authentication (references #183)