should be `:client_credentials` instead of `:password`