finishes permissions and sets up proper nested routes for collaborations