Client app 'developers' should be allowd to Authenticate