need to figure out do_related
need to figure out user management stuff

route to apps have mismatched permissions