Password grant feature work.

if discovery response fails or invalid, you should log here.