Fixed bug in osin's handling of password access requests