fix body param automatic renamed to upercase
added simple emberjs permissions feature