convert warning on claim evaluation to debug printout
include client_id and scope values in resolved access_token

make client_id and scope values available for OAuth 2.0 authorization
purposes and convert space separated scope in to a JSON array;
fix free JSON token resources on return