changed to Require all granted