OAuth 2 password grant type - mongoose plugin