fix some error messages
add default_token_type support for OAuth 2.0 authorization servers that do not return a token_type