middleware to support token/scope-restricted client registration