basic user based rights management + basic routing with iron-router