Fixing superuser permission checking

Fixed issue where isSuperUser() would return false if the user is a superuser by a group permission. It now checks both the user's and the user's groups' permissions.