Add tests for client credentials flow