create survey validate finished take survey page now uses permissions