Part 1/2: client authentication requirements apply to all endpoints client authentication is used at

[Joseph Heenan]

As per discussion on https://bitbucket.org/openid/fapi/issues/245/fapi-ciba-client-authentication-at the client authentication restrictions in FAPI-R/RW only apply to the token endpoint currently, but should apply to all end points.

[Joseph Heenan]

FAPI-R/RW: client authentication restrictions apply to all endpoints

Previously the text explicitly mentioned only the token endpoint, but the intention is that the restriction should apply anywhere client authentication is used.

closes #261

→ <<cset 205be6bfce13>>

[Dave Tonge]

FAPI-R/RW: client authentication restrictions apply to all endpoints

Previously the text explicitly mentioned only the token endpoint, but the intention is that the restriction should apply anywhere client authentication is used.

closes #261

→ <<cset 42e8379508c6>>