now checking for permissions when entering login controller :D
oops, removed user_likes as a permission