token endpoint uses new "authenticateClient" middleware supporting client_secret_basic, client_secret_post and client_secret_jwt authentication