use canvas referrer page as next when asking for permissions