mod_http_oauth2: Enforce the registered grant types Thus a client can limit itself to certain grant types. Not sure if this prevents any attacks, but what was the point of including this in the registration if it was not going to be enforced? This became easier to do with client_id being available earlier.

This module produces more detailed HTTP logs for Prosodys built-in HTTP
server. The format is similar to that of Apache and go into Prosodys
normal logs at the `info` level.