Add form-based client auth tests