Secure app with user permissions; add specs to confirm permissions are configured correctly

for some reason it looks fine in sublime but not here in Github