Added info on permissions model

Includes how long permissions last, restriction of stored permissions to HTTPS.