Create hasPermission function in auth

Now, from any request, we can call
    app.locals.hasPermission req, 'somePermission', cb
We can assign permissions to all visitors by creating and adding them to
the 'everyone' role.
We can also assign permissions to every logged-in user by assigning them
to the 'users' role.