Add missing grant for OAuth2 first party apps using username and password to get access_token.

Adds missing OAuth2 password grant authentication, this helps for first party apps of the OAuth server that have access and/or can be trusted with username/password.