fix redirect and create permission 'users_private_info'