Add a grant type for email-based flow

Our ideal flow involves delivering an email with a code in it that works as the OOB delivery, instead of using a password. We'll need a separate grant type to indicate that.