Make client credentials optional for password grant.