User: Add method to check if user has a permission

Fixes #32