OAuth username/password flow is not supported
Fix validation that should have been strict