added home controller to permissions to allow homepage visits