Added verification of client secret for tokens