small change to how fake permissions are given to authenticated users.