Added Missing Check For Trusted Client

Forgot to add check for trusted clients in the password grant flow.
Added an ClientNotTrusted exception class to invalid clients. This is thrown if a non-trusted client tries to use the password grant flow.