Merge pull request remove_callback_verification

Merge pull request #17 from gabrielgrant/v16_setup_name_change

add draft-16 to package name

Support client_secret authentication in POST body in password flow as…

… well