Permission class for checking OAuth token