basic structure for testing a resource owner granting client authentication