How should I handle permissions for restricted pages? - Theo's Typesafe Cult