removed one lingering assumption that the oauth client registry is always the current database