Added endpoint for permissions in API root: fixes #6
Creation of default permissions not possible: fixes #8