added provider/client security restriction so providers only see their clients, client list on provider page et.