Allocation-client subpage

[DO NOT MERGE] only for review
use scrooge_permission for Allocation admin (`from ralph_scrooge.utils.security import scrooge_permission`)