Fixed some routing bugs and exposed hasPermission(), hasFeature() from the current user object.