IdentityServer3

Remove unused variable.

Update TokenRequestValidationLog to scrub sensitive fields, ignoring case.

Ignore case for password pattern matching

Scrub password from HTTP Logger Body

Use ProtectedResourceErrorResult to look up Http Status Code instead of making everything a 400 Bad Request.