added permission to application.rb