Started to add permission checking

Role is set on login. Each page should verify the role before
displaying anything or performing na action.