Updated api readme to relect removal of Permission endpoint