Cleaned up permissions
Removed obsolete session[:user_flags]