Add permission checks for static methods
Clear the cached identity from the session if it fails verification