Pass username and password on token request