Descriptive errors in auth with lacking configuration

[felix-hilden]

If a credentials client is misconfigured and authorisation is attempted, error messages emitted from the client itself are not clear. We shoud check the configuration before attempting to authorise to provide better information.

[felix-hilden]

This is only currently true for adding auth headers without client secrets. I think we'll get away with simply raising a value error.