add permissions capacity to RouteGuard and ControllerGuard

Another way to manage permissions checks for RouteGuard as an alternative to #238 

Discussion is open. ;)
Like discussed in #238, it will be another PR.
I keep it simple first.