fix logout user stomping on permissions