added permit to oath clients controller