diff --git a/WebKit/scripts/controller/NewPost.js b/WebKit/scripts/controller/NewPost.js
index 078848b..cd33d35 100644
--- a/WebKit/scripts/controller/NewPost.js
+++ b/WebKit/scripts/controller/NewPost.js
@@ -16,6 +16,7 @@ function(APICalls, HostApp) {
 
 		this.mentions = [];
 		document.body.className = "new_post";
+		this.is_private = false;
 
 		// Textarea
 
diff --git a/WebKit/scripts/controller/Oauth.js b/WebKit/scripts/controller/Oauth.js
index 9999826..7967c12 100644
--- a/WebKit/scripts/controller/Oauth.js
+++ b/WebKit/scripts/controller/Oauth.js
@@ -35,7 +35,8 @@ function(HostApp, APICalls, Hmac) {
                         "https://tent.io/types/photo/v0",
                         "https://tent.io/types/cursor/v0"
                     ]
-                }
+                },
+                "scopes": ["permissions"]
             },
             "permissions": {
                 "public": false
diff --git a/WebKit/scripts/controller/Timeline.js b/WebKit/scripts/controller/Timeline.js
index 43db2d3..c7d9331 100644
--- a/WebKit/scripts/controller/Timeline.js
+++ b/WebKit/scripts/controller/Timeline.js
@@ -146,9 +146,9 @@ function(Core, APICalls, HostApp, URI) {
 
             if (!this.reload_blocked) {
                 this.reload_blocked = true;
-                debug(url)
+
                 APICalls.get(url, { callback: function(resp) {
-                    debug(resp.responseText)
+                    // FIXME this is getting data when it shouldn't debug(resp.responseText)
 
                     those.reload_blocked = false;