Added user auth and permissions