added extended permissions requests to initial login