Add perms per spell messaging. Fix spellUnauthorized