https://www.pivotaltracker.com/story/show/70478686

Support /oauth/token password grant requests from the login-server
Support for authentication against
 - login server Bearer token - must have oauth resource-id
 - client_id/client_secret of the client we are doing password grant for
 - username/password for the user we are doing password grant for

The UaaRequestMatcher now prints its name during debug logging. This is immensly helpful to understand what matcher actually had a match.

oauth-endpoints.xml must be evaluated after login-server-security.xml if we are to give Login Server first dibs to match /oauth/token requests.

Reordering of login-server-security.xml and oauth-endpoints.xml does not yield any conflicts per table below
oauth-endpoints.xml                                             login-server-security.xml
/oauth/token with Authorization: Bearer                         /oauth/token source=login&grant_type=password&add_new=
/oauth/token with any match
/oauth/authorize response_type=token&source=credentials         /oauth/authorize source=login
/oauth/authorize response_type=token&credentials={              /oauth/authorize login={