Feature Request: Support cognito pools that use client_secret

Currently, attempting to authenticate against a pool with a client secret enabled just gives
```
{
  code: 'NotAuthorizedException',
  name: 'NotAuthorizedException',
  message: 'Client XXXXXXXXXXXX is configured for secret but secret was not received'
}
```
Would be useful to be able to handle this.