Error on authenticated requests

I forget to put the User.settings.json on the users-permissions