adds permissions to pages and changes sign_out to be a get.