a lot of endpoints stuff

implemented perms and tags
dealer with the stupid convict