authUri don't include client_secret
add ApplicationServerAuth
readme
changelog
pubspec