update auth_client
fix permission managing
associate permission with user after signed in