[CXF-6081] Make it easier to control the way AccessTokenService checks the passwords