Added brand and all URLs to permitAll