Allow client credentials to be passed by query string