oauth permissions added, groups handling added