Set the default user permissions in the model instead of controller
fix seeds.rb