add password client authentication method
finish password-based client authentication example comments
implement resource authentication for check_token endpoint
rename client_authenticator to authenticator because it is also used for resource authentication
allow empty resource and client register, for use with the none authentication method
only allow POST for check_token endpoint