Fixes #13
Enable permissions on employee route