added token_endpoint_auth_signing_alg, addresses #511

affects #455