PermissionController : remove Auth::id()
StaffController : remove Auth::id()