Added client verification to RequestAccessToken