sample data instructions
Client schema enumerates "trusted" client type
generate credentials when a resource is created
test stubs for authorization prompt in implicit grant; run tests in either JS or CoffeeScript
added roles to User schema
password signup
local password login, logout and session endpoints
load app.settings from config file; optionally disable local authentication
include OAuth2UI via npm; serve static files and related routes
invalid session if user not found
Merge remote-tracking branch 'upstream/master'