server_list in webui now respects permissions