Add grant approval, scope.Add, ClientAuthorization update, unit tests

`if err := l.authregistry ...`