fixed bug with embargoed permissions
Updated comments to include concerns about cross site security.
Merge pull request #88 from nigelgbanks/7.x-embargo

7.x embargo