simplify permission thingy on oauth URL, functions to iterate and get stuff, automatic role assign on join