Updated the permissions model throughout Shock. See comments and commits.

Updated the permissions model throughout Shock. This also fixes a few bugs in the ACL-checking. Additionally, removed the node load function that required a user id as this is no longer necessary. Permissions should now only be checked in the controller section of the server code.