Made client optional for password grant type

AccessToken now has an optional association with Application
Merge pull request #296 from ianunruh/master

Made client optional for password grant type