Reference session directly from context, do not cache
On server, get permissions for user in fewer SQL queries