fix oauth app authentication
update service
display all rights