fixed permissions on studio to use server permissions and not re-authenticate