Rel 1.4.6 amendment

This pull requests fixes bugs in authentication handling based on audience/resource-ids. It also grants the 'login' client a specific scope oauth.approvals that is used to access the /approvals url.
This PR is aimed at fixing
https://github.com/cloudfoundry/uaa/issues/66