Fix routes
Revert urls till the changes on the server go live in master branch
Add (minimal) tests for adding permissions via scope and item