check tile visibility before rendering

`upate_tile` is being called before `check_permissions` resulting in an permission denied response and a JS error here: `TypeError: Cannot read property 'icon' of undefined` at https://github.com/dimagi/commcare-hq/blob/master/corehq/apps/dashboard/static/dashboard/js/hq_dashboard.ng.js#L124-124