first stab at correct permissions structure
after authentication, users are redirected to where they were originally trying to go