This patch adds the ability to the restrict oauth access to certain
roles. These roles have to be available in an attribute of the profile
info.

This also upgrades to 1.9.9