Auth rest mixin and fixed permissions bug