Add route permissions guard

First commit to add permissions check on route, as discussed in #182

Discussin is open, tests to come
Why is the whole file marked as changed? Very hard to know what has changed :/