Use auth table to give privileges instead of openmrs id