added JWT Bearer Assertion and response_types, closes #51