fixed 'x' icon for password grant and sub fixes. added proper error messages for sending request without auth scheme. fixed empty basic auth request. all that remains is switching the endpoints (see branches 'demo' and 'switchendpoints') and adding client credential support (this shouldnt be hard, code is already written, just need to test)