Added example of password grant
Implicit grant. Needs CORS filter running on UAA.