Added the configuration for Oauth2 password flow. created both auth server and resource server. mapped /api/** to resource server and left the default /oauth/token in the auth server.
Seems to be working fine for now. Will test again tomorrow.