Filter the applications prior to looping through them.

This prevents a call to push for the admin console that we don't need.
Split application clients page in a page for list and a page for edit
Fix authz for console