Add auth permission messages to constants

Finish removing permission from html authorization page.