Schema guard on get-access-token
Add placeholder fields
Logout uri
Rename token to Bearer
Rename wrap-restricted to wrap-require-authorization