Modify 1st party client to be authenticated with client id and secret

 To conform OAuth2.0 spec regarding 'Resource Owner Credentials Password' type,
 authorization server must validate a client with its client id and secret.
 and the client must send http request with 'Authorization Basic: <client's based64 encoded credential>' to authorization server.