Added 'Authorization' header with base64-encoded clientID and clientSecret for 'password' authentication