make oauth-clients configurable