permission changes
tried to fix auth, assure no dupes