Improving OAuth ROPC security on GitLab.com