Update permissions in controllers, add sign in on signup, update tests