Add grant approval, scope.Add, ClientAuthorization update, unit tests

Does this really need to be in its own file?