auth manager + tests
client_secret_post implementation
added comment