Loose ssowat custom permission after updating to 12

Perhaps it changes… There was something here about the domain-portal

Also SSOwat now only manages the SSO/ACL logic (as a nginx Lua middleware)