Password grant type: access token for blocked account

Firstly, tahks for your job!!!

Problem/Motivation

It was the great idea in #2841236: Password grant endpoint: do not allow authentication, when user is blocked → but it is still allowed to get access token for blocked user in v5.2.
#2976463: Blocked user Bearer token regeneration issue → works as expected, but why the module allows to obtain an access token when account is already blocked?

Proposed resolution

I propose use the proposed method from #2841236: Password grant endpoint: do not allow authentication, when user is blocked → if it's possible. Otherwise no way to recognize the user status before tne next request with obtained access token.