allow JWTs as Authorization Grants as of draft 09