Perf testing and fixed problem with auth not being generic
Fixed to_mask to deal with empty list of permissions