wip: resource owner password credentials limpingly works with CORS disabled
fix deviceready immediately  bug