added permissions model and updated gemfile