Check client allowed grant types before issuing a token

Check client allowed grant types before issuing a token
Fix #21