added rights, fixed bug when creating account