add unicorn and fix permissions