permissions on files and profile info into the /me /login and signup API