added permissions controller and routing for users attempting to access pages where you need to be logged in first