adds HttpBasic ClientAssertionType, refactors GrantController to match this