Fix routes on default permissions
Change api settings structure to work with routes and existing db