Add permissions and server auth