Allow groups in OAuth flow