added option to send client id/secret on password grant type