create test apps with a different user
load expire values from settings
fixed bugs in flow implementations
test passing a bad authorization code
test against an expired grant
fix test password flow with bad credentials
tests refactoring
test bad response_type
fixed docstring
avoid runtime check of GRANT_TYPE_MAPPING var
test token requests with bad grant_type values