fixed up permissions to work with image uploading better