explain use of user permissions.
remove email validation.