Enable OAuth2 Implicit Grant

I was looking at the OAuth2 implementation and noticed that Implicit grant is currently disabled. It would be good if this was supported as it encourages people to use the correct grant types when developing client-side browser clients that access the API and doesn't mean people leak their client secrets.