fixed issue with last.fm & ajax
cleaned up permissions