temporarily introduce dependency on xdi2-client for discovery purposes
work on secret token and signature authenticators