Use basic auth instead of parameters for resource owner password based flow