title: Resource Owner Password Credentials Grant - Public Client
body: <p>I am trying to implement Oauth2 for a website using Python oauthlib. I have decided that I would like to use the grant type 'ResourceOwnerPasswordCredentialsGrant', this is because the website and the API are my own and will not be open to third parties.</p>
  
  <p>In 'resource_owner_password_credentials.py' why is 'client_authentication_required' hardcoded to return 'True'?</p>
  
  <p>Do I need to authenticate my client (website)? From my understanding this would be a 'public' and not a confidential client. </p>