Create controller to retrieve permissions, add permission_id back to serialized user model