Basically revamp token endpoint authentication with symfony firewall.
Now password should be salted.