new permissions model
change root from /trivia to /