added signed authentication assertion support to client, closes #558
updated server discovery document to reflect new capabilities
fixed UI for token endpoint auth method
Fixed audience claim on client auth assertion