Strategy for Oauth2 grant_type=password (aka Resource Owner Password) stragety