Allow configuration of required permissions

Summary
--------------

On local intranets or premise devices that do not have keyboards for performing logins, it is not favourable to require staff level permissions and perhaps you wish to authenticate by request IP or something else. 

This allows you to use whatever permissions you want by specifying in your settings file.