add permissions to login