stafflogin fixed and permission display