* Secured API using permissions
- All APIs are now secured depending on a certain permission
- You'll have to re-add permissions and users (I added 3 new permissions)
- This is only server-side, buttons and links are still visible on the client even if the user don't have permission to perform the task