fixes user/request bug
avoids circular imports
fixes bug with file permissions
bumps version to 0.9.6a1.dev2.perms