If the token method is POST params are now passed in the request body, added a body client auth scheme since some provider requires it and bumped version.