added redirect to users and permissions