Checks if a user is already logged in (session) If not, it checks for a url query `username=x&password=y` in order to authenticate the user If both methods fail, the user is redirected to `/login`.

Parses the session and returns the currently logged in user If no user is logged in but is trying to authenticate with URL-queries, this function will call `getUserFromQuery` internally in order to get the username.

Middleware for checking if a user has permission to access a given route The permission to check is given as a second argument as a string Make sure that the permission to check exists before checking it here.