Add permission checks in some views and all controllers
Remove "Soccer" in sport session index, fix typos in achievements