init prod-web; fix permission in script