added Permissions system for passwordAPI