updated permissions

there was a bug where accessibility evaluations were shown to
unauthenticated users