fixed permissions for all servlets, made checkPermissions abstract