Added usage of has<action>Permission in templates for user
Added proxy methods for User service to check permissions and avoid human error
Casted user permissions to a list on user login
Added more rigorous tests for contributor user's permissions