GET /api/auth returns given permissions.