Seed permissions; populate roles in session.validate; translate roles into permissions in authorize
Fix the resource integration tests, now that we authorize against actual permissions