render_navigation helper now respects the user permissions handled by decl_auth. Closes #371