A simple permissions middleware for Express applications.