The authorisation server can now reply with 204 (no content)
in order to request that the client should continue with password
authentication.