allow multiple user needs on perms form

this is because each user doesn't have just one role, but rather
a variety of different combination of permissions
refresh of user needs when requesting users