return the correct permissions for /account/login/ API endpoint (bug 871841)