user login with <html> classes based on permissions