subscriber permissions, fix logout