added missing forward slash to permission url