#374 fix permission error on frontends publications

AppController, call beforeCheckLogin() and checkLogin() before
initAttributes
FrontendController, new checkPublicationPermissions() called after
checkLogin/initAttributes