add login and set permissions