Add support for dynamic credentials in password grant clients

User can now add credentials (of any kind) to the AccessTokenRequest.

Fixes gh-306