Add grant approval, scope.Add, ClientAuthorization update, unit tests

Would be better to initialize these in group:

```
form.Values = &http.Values{
  CSRF: csrf
  ...
}
```