added client_secret_jwt auth method support, closes #174