Added permissions, moved userLogged logic from postHandle to preHandle, added buttons.