FIX: oauth: show all applications