Moves the handling of the permission to the session class. Makes the authentication be handled implicitly.