https://www.pivotaltracker.com/story/show/70392436 Sample prototype of keystone authentication
Must set addNew=true when authenticating with external source
Implement v2 and v3 APIs. v3 API's dont work out of the box
/oauth/token with grant_type=password is a special case.
It is similar to an /oauth/authorize where a user is authenticated against the Login Server's authentication source (ldap,keystone)
and the user is automatically created in the UAA.
https://www.pivotaltracker.com/story/show/70478686