Add users to permissions, improve authentication