correct client authentication method for round trip; JWT claims format temporary changes; remove "params" requirement for configuration