Add grant approval, scope.Add, ClientAuthorization update, unit tests

you *could* one line this as `then, clientID, scopes := req.FormValue("then"), req.FormValue("client_id"), ...`

Also, should be `clientID` instead of `client_id`