Add permission verification to performative route

Description:
Permission verification was removed from bearerStrategy, which now
simply returns a registrant's account details