Added User/Controller Permissions

Can now set permissions on a controller or method level, avoiding
unnecessary "if($user->hasPermission()…" or similiar calls inside the
controller methods.