Implemented password grant flow

And somehow, it works!