Bug 1032772 - Badges pages don't load if you're not signed in

A check that req.session.user exists was missing before a call to permissionsModel, resulting in an error being thrown.
Yeah, I think I agree.  I'll change it, and if there are any objections I'll revert it.