passport.updateUserPermissions now accepts array of hashes as resource with 'from' and 'till' keys