Deny access if the user is blocked

Dieter Holvoetrequested to merge
issue/simple_oauth-3258402:3258402-password-grant-type-6.0.x into 6.0.x

Closes #3258402

Merge request reports