Add support for Resource Owner Password Credentials

This adds support for the [resource-owner password credentials](http://oauthlib.readthedocs.org/en/latest/oauth2/grants/password.html) flow.  E.g.:

    curl -X POST -d "username={yourname}&password={yourpass}&grant_type=password&client_id={your-app-id}&client_secret={your-app-secret}" https://yourserver.com/id/oauth/token


Rescue statements that don't do anything scare me a lot. Can we at least log an error or send it to Sentry? (#23)