Make client credentials optional for password grant -- first cut
Make client credentials optional for password grant -- cleaned up, added tests