Protect resource owner password