Change modlog permission to 'staff'
Fix permission checking between global and room auth