fixed permission issues forcing login when checking out