added the ability to restrict what permissions are available to remember me logged in users, still to trigger a login for situations where a perm is not available, at moment you get a not authorised or operation not available