Bug 1032772 - Badges pages don't load if you're not signed in

A check that req.session.user exists was missing before a call to permissionsModel, resulting in an error being thrown.