Retrieves an Access Token using Username/Password credentials and proves client possession using the DPoP JWT.
Optional scope list.