profile: add missing userpermissions.html template