fix: mark client_id as required in oauth2 token endpoint

fix: mark client_id as required in oauth2 token endpoint #23