So I guess everyone that authenticates and logs in should get some kind of default role / permission