Changed API_POST_PERMITTED from boolean hash to integer hash to allow for small difference in how changed privs. is handled. first test for 7 login providers and changed write priv. in other browser session ok.