fixed route references
updated the models a bit, working out how to setup the perms