Added a helper class for dealing with user permissions.
Auth permission is checked before authorizing a user.
Note types are properly checked against the organization.