Passing permissions to page controller #166

Permissions are grabbed from a valid login lookup once per POST by
keeping this inside the router.

The only problem here is having to pass it all the way down to the page
controller each time and setting the variable there each time. Refactor
this, I must.