Bug 1032772 - Badges pages don't load if you're not signed in

A check that req.session.user exists was missing before a call to permissionsModel, resulting in an error being thrown.
It'd almost make sense though, right? If there's no user, they can't issue a badge. Thoughts, @k88hudson?