kratos perms now handle admin/other roles properly

also added list of allowed roles to the perm object.
renamed perm -> auth