UAA 3.6.3 Release Notes
This release fixes a backwards compatibility issue with Client Authentication to the /token endpoint.
We have the fixed the endpoint to prompt for basic auth header if client credentials are not provided. Many HTTP Clients rely on this trigger mechanism for passing the credentials for authentication. More details can be found here