Added permissions to API and Login