Client app 'developers' should be allowed to Authenticate

forgot to add this to #321