get_access_token verifies method and checks password