Don't show users buttons with links to routes they can't access.

Signed-off-by: Max Fierke <max@maxfierke.com>