More fix on permission check
Added route filters to for ignoring "super" and "callback"