Non-confidential client password grant fix

This PR fixes issues when authenticating public (non-confidential) clients with the 'password' grant that don't have a client_secret.

Fixes #135