draft 10
clarified that scopes are service-specific, clarified normative language around client metadata, added extensibility to token_endpoint_auth_method using absolute URIs, closes #61, closes #64
added security consideration around registering redirect_uris, fixed reference format, closes #63
added references to assertion authn
consistency
fixed erroneous 403's, closes #62
added example for initial registration credential, closes #60
added nov
spellcheck