Non-confidential client password grant fix

This PR fixes issues when authenticating public (non-confidential) clients with the 'password' grant that don't have a client_secret.

Fixes #135 
@landler, are you fixing this? Otherwise I will do it ;)