fixed hashing, client grant, password grant