support for passing runtime auth request params in discovery response