Use same db object and permissions object in menu

This is passed from the router or core controller so we only have one
instance instead of two for each page including the menu. #32