add file permission detection for www-authentication