Refresh token optional for owner credentials; Docstrings for password grant type;