Add some tests for client_secret_jwt authentication