client supports password grant type