Add grant approval, scope.Add, ClientAuthorization update, unit tests

This might be more readable as `url.URL{Query: http.Query{"scopes": "myscope1 myscope2", ...}}`, but it's just a note for the future.