build auth routes
add methods to permService; focus auth on DomainProfile