added StaffUserType enum
implemented Permissions for Session