Made proper use of PagePermission, so that Shiro permissions (including
wildcard) can be used to provide page authorisation based on its URI.
All current unit tests green, but more needed to verify bindings.