Excellent article! I also have noticed that many mobile developers initially try to use the implicit flow for mobile authentication. Google has written some excellent client software for mobile authentication (Android and iOS), referenced in my blog http://www.gluu.co/appauth-blog