fix the user_can helper

now that we have the permission system working,
a fix for the user_can helper

themage