Enable auth and add some permissions