Fixed bug where users weren't given default auth level