Corect log
add permission
now we can add and del tokens
change direct when user does not have permission
change db