add client to not yet allowed authorization request responses