make the permissions form correctly send the request