Client app 'developers' should be allowd to Authenticate

forgot to add this to #321