Add email_and_password grant type.

I found it useful in my application to add the `email_and_password` grant type.  If you think this makes sense too, feel free to accept.  Perhaps there's a simpler way around the issue of using emails as an identifying criterion that I'm missing.