move over to gson for json
TODO ASAP: all perms stuff should be stored in objects and read/ saved to disk when needed, not constantly being parsed